From 36be9d890ec8f0b64557d5c84ed0c29321f79521 Mon Sep 17 00:00:00 2001
From: Harald Welte <laforge@osmocom.org>
Date: Fri, 9 Oct 2020 15:39:25 +0200
Subject: gprs_ns2: Fix parsing of SNS-{ADD,DEL,CHANGE_WEIGHT}

Change-Id: I94c12986f8255e4373b13b1a8fae3df08004ad96
Related: OS#4791
---
 src/gb/gprs_ns2.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/gb/gprs_ns2.c b/src/gb/gprs_ns2.c
index aca89942..b82fd0d4 100644
--- a/src/gb/gprs_ns2.c
+++ b/src/gb/gprs_ns2.c
@@ -875,8 +875,8 @@ int ns2_recv_vc(struct gprs_ns2_vc *nsvc,
 	case SNS_PDUT_CHANGE_WEIGHT:
 	case SNS_PDUT_DELETE:
 		/* weird layout: NSEI TLV, then value-only transaction IE, then TLV again */
-		rc = ns2_tlv_parse(&tp, nsh->data+1,
-				   msgb_l2len(msg) - sizeof(*nsh)-1, 0, 0);
+		rc = ns2_tlv_parse(&tp, nsh->data+5,
+				   msgb_l2len(msg) - sizeof(*nsh)-5, 0, 0);
 		if (rc < 0) {
 			LOGPC(DLNS, LOGL_NOTICE, "Error during TLV Parse in %s\n", msgb_hexdump(msg));
 			return rc;
-- 
cgit v1.2.3